CVE-2017-2117

EPSS 2.1%

Vexday Risk Score

3Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS —EPSS 2.1%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

28 Apr 2017Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

Directory traversal vulnerability in CubeCart versions prior to 6.1.5 allows attacker with administrator rights to read arbitrary files via unspecified vectors.

Affected products

CubeCart Limited · CubeCart

References

http://jvn.jp/en/jp/JVN63474730/index.html https://forums.cubecart.com/topic/52188-cubecart-615-released/http://www.securityfocus.com/bid/96466